Depends on the user. If you have firewall set to allow Axtive X, java etc. It cannot tell the difference between a activeX that says run this, and do this to the back ground, while Java is steadily feeding it's core content into your sys.
Thats why I made such a stink a short while ago about the post somebody did on a screen image. My firewall is set to ask me for anything, and it stopped the activeX with java combo before it could do anything else.

In addition a lot of folks don't "think" they need a firewall with a dial-up, because they are not always on. What they "NEED" to understand is the time they are on is when they are subject to attack.

Yes, they can, if set-up and understood.

I have a good firewall, but a few things (spyware) (only 2 or 3) still seem to get in. I use Spybot - Search and Destroy 1.2, and it finds and deletes them. I usually run it once a week. It is also a free program [img]smile.gif[/img]